CVE-2007-1509

CVE-2007-1509 describes a directory traversal vulnerability in the krypt project (Sascha Schroeder krypt) specifically in enkrypt.php, where an attacker can read arbitrary files by supplying a .. in the datei parameter. Affected component: enkrypt.php; vulnerability arises from insufficient valid...